Overview

overview

7

Static

static

3

a4ffc0c429...98.exe

windows7-x64

7

a4ffc0c429...98.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4ffc0c4296b5c9546f1a8de6b03d1393971fcd343fb1e8843a0ba4c80daf298

  • Size

    2.4MB

  • Sample

    231009-t46ecsgf69

  • MD5

    d8f4ff5abc04c26b90fb87fa2fb2fdbe

  • SHA1

    f817f60bbdd789f6486354b426a131998bc80b6e

  • SHA256

    a4ffc0c4296b5c9546f1a8de6b03d1393971fcd343fb1e8843a0ba4c80daf298

  • SHA512

    a188c632867d4267874b68e17e00626c77ff6a6264e483d7825336021ec232aace4a1aabb56dc639debd0c092e91524b2c62f3ca0e999f753c1a293655600875

  • SSDEEP

    49152:aDTdXLdk7VyafdDqnroHObksLzZmLXpO9q+0OBHO:aDTB5k5yafcnsHOLzZcZy0OBH

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      a4ffc0c4296b5c9546f1a8de6b03d1393971fcd343fb1e8843a0ba4c80daf298

    • Size

      2.4MB

    • MD5

      d8f4ff5abc04c26b90fb87fa2fb2fdbe

    • SHA1

      f817f60bbdd789f6486354b426a131998bc80b6e

    • SHA256

      a4ffc0c4296b5c9546f1a8de6b03d1393971fcd343fb1e8843a0ba4c80daf298

    • SHA512

      a188c632867d4267874b68e17e00626c77ff6a6264e483d7825336021ec232aace4a1aabb56dc639debd0c092e91524b2c62f3ca0e999f753c1a293655600875

    • SSDEEP

      49152:aDTdXLdk7VyafdDqnroHObksLzZmLXpO9q+0OBHO:aDTB5k5yafcnsHOLzZcZy0OBH

    Score
    7/10
    discoveryspywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks